Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 05:33
General
-
Target
JaffaCakes118_a68aed5f4ef4bf512065a8f7505c14beb14b912b2a37e07831ee16f7076925e9.dll
-
Size
490KB
-
MD5
28d1452cfeaf7b70e425e07d54be0181
-
SHA1
2eab36e8e89ed6ae98a75dbf8d738d56a44a2816
-
SHA256
a68aed5f4ef4bf512065a8f7505c14beb14b912b2a37e07831ee16f7076925e9
-
SHA512
e7371764c641fc94992cc48fb94d652c791b7d38a8d9a95580aa6fcad14206c3d74f0b11fb37e321c3cbb1001fdc59570c407c2a5f52663a2df4d0d1e055c0de
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRj:knmj6xK1y3Ik6TZGRj
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_a68aed5f4ef4bf512065a8f7505c14beb14b912b2a37e07831ee16f7076925e9.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB